CVE-2023-46838

2024-01-2900:00:00

ubuntu.com

vulnerability

xen

virtual network

protocol

zero length requests

bugzilla

redhat

suse

linux

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.4%

JSON

Transmit requests in Xen’s virtual network protocol can consist of multiple
parts. While not really useful, except for the initial part any of them may
be of zero length, i.e. carry no data at all. Besides a certain initial
portion of the to be transferred data, these parts are directly translated
into what Linux calls SKB fragments. Such converted request parts can, when
for a particular SKB they are all of length zero, lead to a de-reference of
NULL in core networking code.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-223.235UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-176.196UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-102.112UNKNOWN
ubuntu23.10noarchlinux< 6.5.0-27.28UNKNOWN
ubuntu24.04noarchlinux< 6.8.0-7.7UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1166.179UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1122.132UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1057.63UNKNOWN
ubuntu23.10noarchlinux-aws< 6.5.0-1017.17UNKNOWN
ubuntu24.04noarchlinux-aws< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-223.235	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-176.196	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-102.112	UNKNOWN
ubuntu	23.10	noarch	linux	< 6.5.0-27.28	UNKNOWN
ubuntu	24.04	noarch	linux	< 6.8.0-7.7	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1166.179	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1122.132	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1057.63	UNKNOWN
ubuntu	23.10	noarch	linux-aws	< 6.5.0-1017.17	UNKNOWN
ubuntu	24.04	noarch	linux-aws	< any	UNKNOWN